Haven is a calm, collaborative workspace where your team works with notes, files, apps, and data - encrypted by default and installable on any device. It runs on MindooDB, an open-source, local-first sync database you can run on your own servers, in your own jurisdiction; the server only ever sees ciphertext. Real data sovereignty, without giving up real-time collaboration.
Client-side keys, no plaintext on the server. Apps only see what you explicitly share. Fine-grained access control governs who can create, change or delete documents - enforced cryptographically, even offline.
Automerge-based merges, shared tenants, and a guided onboarding flow for bringing teams in.
Runs as a PWA on iOS, Android, and desktop. Add multiple instances for work, personal, and demos.
Full local use with built-in backup and flexible push-only, pull-only, or bidirectional sync.
Build apps with the MindooDB App SDK or have an AI generate them from the published context files.
When buyer, seller, and counsel work on the same confidential deal, each side keeps its own tenant. Haven brings the shared documents, Q&A, and closing tasks into one workspace - while the server only ever sees ciphertext, and every change becomes a signed node in a tamper-evident DAG.
Two AI hosts · ~23 min · generated by NotebookLM
A relaxed deep-dive into how Haven turns MindooDB into a browser-based workspace: end-to-end encrypted data with keys that never leave your device, local replicas for fast offline work, CRDT-based merging with a tamper-evident change history, strictly separated multi-tenant workspaces, custom apps, and virtual views that combine data across contexts. An entertaining and accessible introduction to the platform.
Pages, Chicklets, and groups let you arrange databases, applications, notes, web content, and media exactly the way your team thinks. Haven becomes the calm home screen for your encrypted data.
Haven is not a concept mockup. It is a working product that already brings together navigation, workspace organization, search, database access, and local-first workflows in the browser.
Click the workspace screenshot to inspect a much taller Haven page with notes, media, running apps, mind maps, Kanban boards, and Mermaid tiles in one real workspace.
Applications can run embedded in the Haven grid or in their own tab, access selected databases and views, and ship as either externally hosted web apps or Haven-hosted bundles served offline by the service worker.
Haven inherits MindooDB's trust model. Data is encrypted on the client before it ever leaves the device, apps run in sandboxed iframes with granular permissions, and the DAG explorer makes collaboration auditable.
Haven Community works in three topologies. Choose the one that matches your workflow - you can move between them without changing clients.
Create tenants and databases entirely offline. No server, no sync - ideal for personal use, drafts, and offline demos.
Push a local tenant to the hosted demo server and invite real collaborators. Demo data is wiped periodically - it is for evaluation, not production.
Point Haven at a MindooDB server you run. See README-server.md for setup.
The Haven PWA at haven.mindoodb.com. Free to use today, full local use, optional demo server, and self-hosting against your own MindooDB server.
Custom branding, managed UI and workspaces, in-house app store, workspace roaming, automatic backup, inline attachment editing, and more - from Mindoo GmbH.
Product updates and implementation notes from the MindooDB ecosystem.
25.05.2026
Mindoo TeamEdit gains a Word/.docx editing mode alongside the existing collaborative Markdown editor. Two people can now open the same .docx file in two TeamEdit instances, type into the same paragraph, drop in images, reshape a table, accept tracked changes, leave threaded comments - and watch the merged result appear on both screens through MindooDB's Automerge sync, with only the actually changed spans on the wire. TeamEdit also handles multiple documents open at once - a Window menu lists every open Markdown brief and Word memo and lets you flip between them. Under the hood the document is mapped to Automerge's rich text format (formatting spans plus block markers) on top of the EigenPal docx-editor we picked after evaluating SyncFusion and Apryse - chosen for its Apache 2.0 license, OOXML round-trip fidelity, and ProseMirror foundation that lets us plug in MindooDB's collaborative storage cleanly.
21.05.2026
Four days after the initial release we are shipping a big round of updates to Mindoo TeamGrid, the open source collaborative spreadsheet for MindooDB Haven. The headline feature is Virtual View Sheets - pick any virtual view configured in Haven (including views that combine your private data with work data and with data from a partner company's tenant) and drop it into your workbook as a normal worksheet that Excel formulas, charts and XLSX export can read. Alongside it: a much larger formula engine with 280 Excel-compatible functions courtesy of fast-formula-parser, the four chart types Excel users actually use day to day (Column, Bar, Line, Pie), spreadsheet templates with File / New from template..., hidden rows and columns that survive an Excel round trip, automatic cell type detection from typed content, and a selection and keyboard model much closer to what people expect from Excel. And all of it still merges across two laptops, two devices, and four tabs the same way it did on day one.
19.05.2026
Attachments in MindooDB are not stored as one blob hanging off a document. Each file is a chain of small encrypted chunks (256 KB by default, encrypted with the document's own key), and each chunk points back at its predecessor. The document only references the *last* chunk - which turns growing a file into appending one chunk, makes earlier document revisions automatically see only the bytes that existed then, and reduces moving or duplicating a large attachment between documents to copying a tiny JSON entry. Chunks are deduplicated by a hash of their encrypted bytes, so the same file inside one MindooDB database occupies storage once and syncs once. On top of all that, Haven streams long media attachments straight from those decrypted chunks - and for older MP4 files that browsers refuse to stream, Haven rebuilds them on the fly into a streamable shape with a lazy-loaded mp4box.js pipeline.